@teamscala/service-boot 0.23.373 → 0.23.374

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.373",
+  "version": "0.23.374",
   "sideEffects": false,
   "imports": {
     "#service-boot/*": "./src/*",

package/src/register-registry-page-route.ts

@@ -599,6 +599,73 @@ export async function registerRegistryPageRoute(
 					// Branding fetch failed — keep the default brand (no regression).
 				}
 			}
+			// BRAND FROM THE ORG THAT OWNS THE RESOURCE, not the website's owner.
+			// A public resource page (an assessment report, a shared document) is
+			// hosted on a shared website but BELONGS to a tenant. resolvePageBrand
+			// reads pageData.orgId, which is the WEBSITE's org, so every tenant's
+			// report rendered the host org's logo and palette.
+			//
+			// Measured 2026-08-17: the Launcha Authority Blueprint is owned by GMG
+			// APAC (#FF4500, launcha logo) and rendered with GBG Indo's navy and
+			// scala mark, because both pages live on the shared "Public Pages"
+			// site. The loader had already resolved the right org — nothing
+			// consumed it.
+			//
+			// `brand_org_path` names where the owning org id lives in the resolved
+			// loader data (e.g. "quiz.organisation_id"), so which resource owns the
+			// brand is a ROW, never a per-service branch
+			// (`business-logic-is-rows-plus-executors`). Absent or unresolvable,
+			// the website's org stands — this can only ever narrow the brand to a
+			// more specific owner, never blank it.
+			const brandOrgPath = (routeConfig as { brand_org_path?: string }).brand_org_path;
+			if (brandOrgPath) {
+				let cursor: unknown = resolved;
+				for (const key of brandOrgPath.split(".")) {
+					if (cursor == null || typeof cursor !== "object") {
+						cursor = undefined;
+						break;
+					}
+					cursor = (cursor as Record<string, unknown>)[key];
+				}
+				if (typeof cursor === "string" && cursor.length > 0) {
+					pageData.orgId = cursor;
+					// orgId alone is not enough. resolvePageBrand fills only the
+					// accent/secondary/muted gaps from the org; primaryColor, logo and
+					// companyName come from pageData.brand, which was built from the
+					// website's org. Replace those too, the same way the session
+					// override above does, or the page keeps the host's logo while
+					// claiming the tenant's org.
+					try {
+						const owner = await fetchOrganisationPageBranding(
+							getServerClient() as never,
+							cursor,
+						);
+						if (owner) {
+							const existing = (pageData.brand as Record<string, unknown>) ?? {};
+							const existingLogo = (existing.logo as Record<string, unknown>) ?? {};
+							pageData.brand = {
+								...existing,
+								companyName: owner.company_name,
+								companyFriendlyName: owner.company_name,
+								primaryColor: owner.brand_primary_color ?? existing.primaryColor,
+								headingFont: owner.brand_heading_font ?? existing.headingFont,
+								bodyFont: owner.brand_body_font ?? existing.bodyFont,
+								logo: {
+									light: owner.company_logo_for_light_theme,
+									dark: owner.company_logo_for_dark_theme,
+									brand: existingLogo.brand ?? null,
+								},
+							};
+						}
+					} catch {
+						// Branding fetch failed — keep the website brand (no regression).
+					}
+				} else {
+					log.warn(
+						`[scala-install:${serviceSlug}] brand_org_path "${brandOrgPath}" resolved no org id for ${params.path}; keeping the website org brand`,
+					);
+				}
+			}
 			warnUncoveredBlocks(pageData, components, serviceSlug, params.path, log);
 			// Fire the AI-chat conversation prefetch NOW (in parallel with the
 			// proposal/partner/client post-processors below) so its ~eager cost is